Privacy Policy

Information We Collect

Your Name and Email Address

For your account, caregiver invitations, and emergency contact.

Your Child's Information

Name, date of birth, and gender.

Health and Activity Data You Log

Feeding, sleep, diapers, growth and measurements, medications, temperature, symptoms, vaccinations, and milestones.

Photos You Add

Your baby's profile photo, Bloom Board photos, and Memory photos.

Free-Text Notes

Any notes you write within the app.

Pediatrician and Emergency-Contact Details

Name, phone number, and address, if you enter them.

Push-Notification Token

A device push-notification token, so we can send reminders and predictions.

Install Identifier and App Milestones

A random identifier created by the app when it is installed (not Apple's advertising identifier and not the device's vendor identifier), and a short list of moments in your first use of the app: starting and finishing set-up, creating your baby's profile, saving a first and a fifth entry, logging by voice with Siri, and whether a rating request was shown. Each moment is recorded with the app version and the time it happened.

Apple Search Ads Attribution

If you installed Mina Bloom after tapping one of our ads on the App Store, the campaign, ad group, keyword and country of that ad, the date of the tap, and whether it was a download or a re-download.

Subscription Status

Your subscription or trial status, verified through Apple.

Email Preferences

Whether you agreed to receive tips and news by email, when you made that choice and where (during set-up, in Settings, or through an unsubscribe link), and whether you want the weekly recap by email. Both are off unless you turn them on.

Emails We Send You

A record of each email we send you (which email, when, and whether it was delivered, bounced or marked as spam), so we never send the same one twice and can stop sending to an address that does not work. We also note the date the in-app rating request was last shown, so we do not also ask you by email.

Purchase Link

When you subscribe, the app attaches your Mina Bloom account identifier to the purchase. Apple then includes it in the subscription updates it sends us (renewal, billing problem, cancellation, end of a trial), so they reach the right account.

How We Use Your Data

Core Functionality

Your data is used to provide the tracking, insights, and prediction features of the app. This includes generating personalized recommendations based on your baby's patterns.

Smart Pattern Insights

We use aggregated and anonymized data patterns to improve our predictions. Your personal data is never shared with third parties for this purpose.

Notifications

If enabled, we use your data to send timely reminders for feedings, medications, and other scheduled activities.

Product Measurement

We use the install identifier, the app milestones and the Apple Search Ads attribution only to understand where new parents get stuck while setting up the app and which of our App Store ads bring parents who keep using it. We read them only as totals (for example, how many installs from one campaign created a baby profile), never to build a profile of you. When you sign in, the milestones recorded on that installation are linked to your account. Installations that never create an account stay unlinked and contain no name, email or contact details.

Emails About Your Account

We send a small number of emails that are part of the service you signed up for: a welcome email on the day you create your account, and emails about your subscription (the start of a free trial, a reminder before a trial ends, a billing problem, a cancellation, or the end of your subscription). These are sent to perform our contract with you and cannot be switched off, but there are only a handful of them.

Tips, Recaps and Reminders by Email (Only With Your Consent)

Only if you tick the box during set-up or turn it on in Settings › Notifications › Email, we also send: a few tips during your first week, a weekly recap of the past week (the number of feedings, hours of sleep and nappy changes you logged, compared with the week before), a reminder if you have not logged anything for 7, 14 or 30 days, and once at most an invitation to rate the app on the App Store. We send at most one of these every three days, and none during the night in your time zone. The legal basis is your consent, which you can withdraw at any time, with one tap on the unsubscribe link in any of these emails, from your email app's own unsubscribe button, or in Settings › Notifications › Email. Our emails contain no tracking pixel and their links are not rewritten: we do not know whether you open an email or which link you tap.

Data Storage & Security

Encryption

All data is encrypted in transit using TLS 1.3 and at rest using AES-256 encryption.

Cloud Storage

Your data is stored on Supabase infrastructure hosted on AWS in the European Union (eu-west-1, Ireland), with encryption in transit and at rest.

Access Controls

Only you and caregivers you explicitly invite can access your baby's data. Our team cannot access your personal information except for technical support purposes when requested.

Data Sharing

Caregiver Sharing

You can invite trusted caregivers to view or edit your baby's data. You control their access level and can revoke access at any time.

Third Parties

We do not sell, rent, or share your personal data with third parties for marketing purposes. We may share anonymized, aggregated data for research purposes.

Legal Requirements

We may disclose information if required by law or to protect the rights, property, or safety of our users.

International Data Transfers

Where Your Data Is Stored

Mina Bloom is operated from France and your data is stored in the European Union (Ireland). If you use the app from outside the European Union, including from South Korea or Japan, your data is therefore transferred to and stored in the European Union. The European Union has a data-protection framework that the European Commission and Japan's Personal Information Protection Commission recognise as providing an equivalent level of protection for transfers between them.

Sentry

Sentry is provided by a US-established company, Functional Software, Inc., but we use its European region, so the crash and performance data described above is stored in Frankfurt rather than transferred to the United States.

For Users in South Korea and Japan

When you use the app we transfer, over an encrypted connection: your account details, your child's information, the records, photos and notes you add, and the install identifier and app milestones described above. They go to Supabase (our backend, data stored in Ireland, EU) to provide the app; to Functional Software, Inc. (Sentry, data stored in Frankfurt, EU) for crash diagnostics; to Resend, Inc. (United States) to deliver our emails, as described under Service Providers below; to Apple Inc. (United States) for sign-in, push notifications, App Store purchases and Apple Search Ads attribution; and, only if you turn on AI features, to Google LLC (United States) for the AI requests described below. Each recipient keeps the data only as long as described in Retention. You can refuse this transfer by not using the app, or stop it by deleting your account at any time in Settings; without the transfer the app cannot store or sync your records. Contact for any request: privacy@babybloomjourney.com.

Service Providers / Subprocessors

Overview

We share data with the following service providers only to operate the app. Each is bound by a written data-processing agreement that requires it to provide at least the same level of protection for your data as this policy requires of us, to process it only on our documented instructions, and to assist us with deletion requests. None of them uses your data for its own purposes, and none may sell it.

Supabase

Our backend: account authentication, database storage, realtime sync, and push notification delivery.

Apple and Google

Sign-in (Sign in with Apple / Google Sign-In) and, for purchases, Apple's App Store.

Google (Gemini API)

AI features (see "AI Processing" below).

Resend (Resend, Inc.)

Email delivery. Resend receives the email address it delivers to and the content of that email: for the emails described under "How We Use Your Data", your first name, your child's first name and, in the weekly recap, the totals for the week; for a caregiver invitation, that person's email address. It tells us whether each email was delivered, bounced or marked as spam. Resend processes this only to send email on our behalf. United States.

Apple Push Notification service (APNs)

Used to deliver push notifications natively via iOS.

Apple StoreKit 2

Handles in-app subscriptions through Apple's native In-App Purchase system.

Apple Search Ads attribution (AdServices)

Once per installation, the app asks iOS for an attribution token and our server sends it to Apple, which answers only whether the install came from one of our Apple Search Ads campaigns and, if so, which one. This uses Apple's own framework and needs no tracking permission.

Apple SKAdNetwork (ad measurement)

If you install Mina Bloom after tapping one of our ads outside the App Store — today that means Google Ads only — the app tells Apple how far you got in setting the app up: once at first launch, and once more if you create your baby's profile. Apple then sends that ad network a postback saying an install happened and, coarsely, how far it got. Apple runs this itself and on its own terms: it combines postbacks across many installs, delays them, strips anything that could identify you or your device, and tells neither the ad network nor us who you are — we never receive the postback at all. No advertising identifier is read, no tracking permission is requested, and the app contains no advertising SDK. Nothing about your baby and none of the records you log are involved.

Functional Software, Inc. (Sentry)

Crash and error monitoring, performance diagnostics. Receives crash reports, stack traces, performance traces, app and iOS version, device model, and your account identifier. Never your IP address, name, email or care records. European Union (Frankfurt).

AI Processing (Google Gemini)

Your Permission Comes First

Sharing with Google is off by default. Nothing is sent to Google's Gemini API unless you have explicitly turned it on inside the app, and you can withdraw that permission at any time in Settings › Privacy › "AI features". Withdrawing takes effect immediately. The permission is recorded on your account and checked on our servers before any request is made, so nothing can reach Google without it. Declining leaves the whole app usable.

AI Insights

When you ask for an AI insight we send: your child's first name; their age in months and the age band it falls in; the feeding type you selected; and summary statistics computed from the last seven days of your own logs — the number of feedings and the average interval between them, the number of sleep sessions and the average nap duration, and the number of nappy changes and the daily average. We also send typical reference ranges for that age band, which are not personal data. We do not send the underlying records themselves.

Medication-Name Suggestions

When you ask us to check a medication name you typed, we send that one text string and nothing else. No child name, no dose, no schedule, no dates, and no account or device identifier accompanies it.

What Is Never Sent to Google

Your own name or email address, any photo, any free-text note, your child's last name, pediatrician or emergency-contact details, pumping or milk-storage records, location (the app never requests it), and any device identifier.

Data Handling

Google processes this data only to return a response to us and, under our API terms, does not use it to train its models.

Crash and Performance Diagnostics

Sentry

The app includes Sentry, an error-monitoring tool, so that we learn when it crashes or misbehaves. When something goes wrong, Sentry receives the crash or error itself — the stack trace, the app version, the iOS version and the device model — together with performance traces such as how long a screen took to load. Events are associated with your account identifier so we can tell whether a crash hit one person or everyone.

What Sentry Never Receives

Your IP address (we explicitly disable that setting), your name, your email, your child's name, and none of the health or care records described above. It is not used for advertising, it does not track you across other companies' apps or websites, and the data is stored in Sentry's European region (Frankfurt).

What We Don't Collect

Limits on Data Collection

We do not collect your precise or background location, your contacts list (except for pediatrician or emergency-contact details you enter yourself), browsing history from outside the app, or health data from connected devices unless you choose to log it manually.

No Tracking, No Ads

Our Commitment

We do not use third-party advertising or analytics that track you across other apps or websites, we do not show ads, and we do not sell your personal data. The app shows no App Tracking Transparency prompt because it performs no cross-app tracking. The measurement in the app is our own (the install identifier and app milestones described above), plus two mechanisms that Apple operates itself and that pass on no identifier: Apple Search Ads attribution, which tells us which of our ads on the App Store led to an install, and SKAdNetwork, which lets Apple tell an ad network — today only Google Ads — that one of its ads led to an install. Both are described under Service Providers above. Our emails contain no tracking pixel and no tracked links.

Your Rights

Access & Export

You can view all your data within the app, and you can share a text summary of your activity history from the app. For a complete copy of your data, contact us and we will provide it.

Deletion

You can delete your account and all associated data at any time from the Settings page. This action is permanent and cannot be undone.

Correction

You can update or correct any information about your baby at any time through the app.

Retention

We keep your data for as long as your account exists. When you delete your account, your records, photos and authentication identity are permanently deleted from our systems. Crash diagnostics are retained by Sentry for 90 days. The install identifier, app milestones and Apple Search Ads attribution linked to your account are deleted with it. The record of the emails we sent you is deleted with your account. If an email to your address bounced permanently or was marked as spam, we keep that address and the reason on a do-not-email list even after your account is deleted, so that we never write to it again; this list holds nothing else. You can ask us to remove it at privacy@babybloomjourney.com.

Children's Privacy (COPPA Compliance)

Mina Bloom is designed for parents and caregivers to track infant care. We do not knowingly collect personal information directly from children under 13. All data is entered and managed by adult users.

Medical Disclaimer

This app is for informational purposes only and is not intended to diagnose, treat, cure, or prevent any medical condition. The insights and predictions provided are based on patterns in your data and should not replace professional medical advice. Always consult your pediatrician or healthcare provider for medical decisions.

Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at: privacy@babybloomjourney.com

Data controller: Audrey Lombo, sole trader (entrepreneur individuel) established in France, registered under SIREN 849 176 102 (SIRET 849 176 102 00010). The registered postal address is published in the French national business register under that SIREN and is available on request.